Shift

Future

Cryptocurrency

Tornado Cash

Tornado

2023 marked a record high in the number of crypto platform hacks linked to North Korea, but the total value of looted funds decreased significantly. According to <a href="https://go.chainalysis.com/2023-crypto-crime-report.html" target="_blank" rel="noopener nofollow">Chainalysis</a>, a firm specializing in blockchain analysis, there has been a<a href="https://www.bnnbloomberg.ca/north-korean-linked-hackers-are-targeting-crypto-platforms-more-but-stealing-less-report-says-1.2025976" target="_blank" rel="noopener nofollow"> notable increase</a> in cyber attacks to a total of 20 over the past year. 
These incidents have been linked to operatives from the Democratic People’s Republic of Korea (DPRK), who have managed to extract <a href="https://bitcoinist.com/crypto-heist-north-korean-hackers-swipe-600-million/" target="_blank" rel="noopener ">just over $1 billion in crypto</a> through these exploits. This figure represents a 40% drop from the $1.7 billion stolen in 2022, suggesting a shift in the landscape of digital asset theft. 
<h2 id="north-korean-hackers-shift-tactics-amid-declining-crypto-thefts">North Korean Hackers Shift Tactics Amid Declining Crypto Thefts</h2> 
Cryptocurrency has long been a target for North Korean hackers, often used to circumvent “international sanctions,” according to US officials. The decline in stolen funds mirrors a “broader trend in the crypto security environment,” particularly concerning decentralized finance (DeFi) protocols. 
In 2023, DeFi protocols experienced a 64% reduction in theft, totaling $1.1 billion, down from $3.1 billion the <a href="https://bitcoinist.com/north-korean-cyber-onslaught-crypto-thefts-2023/" target="_blank" rel="noopener ">previous year</a>. According to Chainalysis, this decline in theft aligns with “heightened security measures” and “reduced overall activity in DeFi spaces.” 
Erin Plante, Vice President of Investigations at Chainalysis, commented on these hackers’ evolving tactics, noting that while their success rate in major heists might have slowed, “the threat’s not going away by any means.” 
Bloomberg further disclosed that as crypto platforms enhance security measures, North Korean hackers adapt to more diverse and sophisticated strategies. 
Joe Dobson, principal analyst at cybersecurity firm Mandiant, observed that these criminals continuously study the evolving landscape to exploit new advancements maliciously. Dobson noted: 
<blockquote>
 They look at what’s changing, what’s evolving, and how they can use that malicious intent. Whatever the advancement is, they’re going to find a way to take advantage of it.
</blockquote> 
Besides improved security practices and decreased DeFi activity, “investor behavior” could also influence the decrease in stolen amounts. 
Allan Liska, a senior intelligence analyst at Recorded Future Inc., suggests that the fallout from high-profile events like the FTX collapse may have led investors to spread their assets across various platforms, reducing the “pool of funds” available for theft. 
<h2 id="evading-sanctions-north-korea-s-persistent-cyber-threat-to-crypto">Evading Sanctions: North Korea’s Persistent Cyber Threat To Crypto</h2> 
Meanwhile, a <a href="https://www.trmlabs.com/post/north-korean-hackers-stole-600-million-in-crypto-in-2023" target="_blank" rel="noopener nofollow">report</a> from TRM Labs highlighted the impact of DPRK-linked hacks, which have been “ten times” more damaging than those unlinked to North Korea. Since 2017, over $3 billion in cryptocurrency has been lost to Pyongyang’s operatives. 
The report details how hackers primarily target digital wallet vulnerabilities, transferring stolen funds to controlled addresses and converting them into hard currency through high-volume brokers. 
North Korea’s adaptability in money laundering methods under international scrutiny is noteworthy. Following sanctions and enforcement actions against platforms like <a href="https://bitcoinist.com/us-treasury-sanctioned-crypto-dex-tornado-cash/" target="_blank" rel="noopener ">Tornado Cash</a> and <a href="https://bitcoinist.com/dark-web-largest-crypto-laundromat-chipmixer-closed/" target="_blank" rel="noopener ">ChipMixer</a>, DPRK-linked operatives <a href="https://bitcoinist.com/atomic-wallet-hacker-moves-stolen-funds/" target="_blank" rel="noopener ">shifted to the mixer Sinbad</a>. 
However, with Sinbad also facing <a href="https://home.treasury.gov/news/press-releases/jy1933" target="_blank" rel="noopener nofollow">sanctions from the Office of Foreign Assets Control (OFAC)</a> in November 2023, North Korea continues to explore alternative laundering tools, underlining the persistent and evolving nature of this threat to the crypto ecosystem. 
<img loading="lazy" decoding="async" class="size-medium" src="https://www.tradingview.com/x/xd8CPA0t/" alt="The global crypto market cap value on TradingView.com" width="2770" height="1556"> 
Featured image from Unsplash, Chart from TradingView

Surge in North Korean Crypto Attacks: Record Number Of Hacks, Yet Lower Total Loot In 2023

Table of Contents

Bitcoinist

Other articles published on Jan 25, 2024

Bitcoin Price At Make-Or-Break Moment, Key Levels To Watch

Polygon Labs to unite multiple blockchains with AggLayer Protocol

Fortuna: Win SOL and NFTs in FamousFoxFed’s Solana Games

Biggest Crypto Gainers Today on Uniswap – $CHECKS, $VV, $BIDEN2024

Major XRP Ledger Feature Gets the Green Light

Traditional Finance’s Entry Could Spark Bitcoin’s Biggest Bull Run

Join our free newsletter for daily crypto updates!